Skip to content

IT Audit & Technology Controls Assurance Training Course

Walks through the IT audit lifecycle and how to test the design and operating effectiveness of controls over systems, access, cybersecurity and operations.

TRM · Technology Risk ManagementAll Levels#2606ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

This advanced practical course provides a structured approach to auditing information technology environments and evaluating the design, implementation, and operating effectiveness of technology controls. It focuses on providing assurance over IT governance, systems, infrastructure, applications, data, cybersecurity, access management, and technology operations. The course examines the complete IT audit lifecycle, from audit planning and risk assessment through control testing, evidence collection, findings evaluation, reporting, and follow-up. Participants will develop practical techniques for identifying technology risks, defining audit objectives, developing audit procedures, and assessing control effectiveness. Particular attention is given to general IT controls, application controls, logical access, change management, IT operations, backup and recovery, data integrity, system development, cloud environments, third-party technology services, and cybersecurity controls. The program also addresses audit evidence, sampling, control deficiencies, root-cause analysis, and risk-based reporting. Practical exercises enable participants to develop IT audit programs, perform control walkthroughs, test controls, document audit evidence, evaluate deficiencies, prepare findings, and develop remediation plans that provide meaningful assurance to management and governance bodies.

Learning Objectives

  • Analyze the principles, scope, and objectives of IT auditing and technology assurance.
  • Develop risk-based IT audit plans aligned with organizational objectives.
  • Identify technology risks and translate them into relevant audit objectives.
  • Evaluate the design and operating effectiveness of IT general controls.
  • Assess application controls supporting data integrity and business processes.
  • Audit logical access, privileged access, authentication, and user lifecycle management.
  • Evaluate IT change management, system development, and configuration controls.
  • Assess IT operations, backup, recovery, availability, and incident management controls.
  • Evaluate cloud, third-party, and technology outsourcing controls.
  • Apply appropriate audit testing, sampling, evidence collection, and documentation techniques.
  • Develop risk-based audit findings, root-cause analysis, recommendations, and remediation plans.
  • Strengthen technology assurance through effective reporting, follow-up, and continuous improvement.

Who Should Attend

This course is designed for IT auditors, technology assurance professionals, internal auditors, information security auditors, IT risk professionals, and governance, risk, and compliance specialists. It is also suitable for CIOs, IT managers, cybersecurity professionals, technology control owners, system and application managers, compliance professionals, risk managers, and professionals responsible for internal controls and technology governance. The program is particularly relevant to banks, financial institutions, government entities, telecommunications companies, oil and gas organizations, healthcare institutions, and large corporations operating critical technology environments.

Learning Outcomes

  • Develop risk-based IT audit plans and audit programs.
  • Identify technology risks and determine appropriate audit objectives.
  • Evaluate IT general controls across critical technology processes.
  • Test application controls affecting data accuracy, completeness, authorization, and integrity.
  • Assess logical and privileged access controls.
  • Evaluate user provisioning, modification, and termination processes.
  • Assess change management and system development controls.
  • Evaluate IT operations, backup, recovery, and availability controls.
  • Assess cloud and third-party technology controls.
  • Collect and evaluate sufficient and appropriate audit evidence.
  • Document control deficiencies and determine their risk significance.
  • Prepare actionable audit reports and remediation plans.

Course Outline

Day 1

IT Audit Fundamentals, Risk Assessment & Audit Planning

  • Purpose and scope of IT auditing
  • IT audit versus technology risk and compliance assurance
  • IT governance and control environments
  • Technology risk identification
  • Risk-based audit methodology
  • Audit universe and risk assessment
  • Audit objectives and scope definition
  • IT audit planning and resource allocation
  • Audit criteria and control objectives
  • Audit programs and procedures
  • Practical Application: Develop a risk-based IT audit plan for a critical technology environment
Day 2

IT General Controls & Access Management

  • IT general controls framework
  • Logical access management
  • User identification and authentication
  • User provisioning and deprovisioning
  • Privileged access management
  • Segregation of duties
  • Password and authentication controls
  • Access reviews and recertification
  • IT change management controls
  • Configuration and release management
  • Practical Application: Perform a control walkthrough and design audit tests for access and change management
Day 3

Application Controls, IT Operations & Data Assurance

  • Application control principles
  • Input, processing, and output controls
  • Authorization and validation controls
  • Data completeness and accuracy
  • Interface and reconciliation controls
  • IT operations management
  • Job scheduling and monitoring
  • Backup and recovery controls
  • Incident and problem management
  • System availability and performance controls
  • Practical Application: Evaluate application and IT operations controls for a business-critical system
Day 4

Cloud, Cybersecurity, Third-Party Controls & Audit Testing

  • Cloud technology control environments
  • Infrastructure, platform, and software services
  • Cloud access, configuration, and security controls
  • Cybersecurity control assurance
  • Security monitoring and incident response controls
  • Third-party and outsourced technology services
  • Vendor risk and control assurance
  • Audit sampling techniques
  • Evidence collection and validation
  • Control testing and exception evaluation
  • Practical Application: Conduct technology control testing for a cloud or outsourced service environment
Day 5

Audit Findings, Reporting & Technology Assurance Improvement

  • Control deficiency identification
  • Risk and impact assessment
  • Root-cause analysis
  • Finding classification and prioritization
  • Audit recommendations
  • Management action plans
  • Remediation tracking and follow-up
  • Audit reporting and executive communication
  • Technology control maturity assessment
  • Continuous assurance and audit improvement
  • Final Workshop: Complete an end-to-end IT audit case covering risk assessment, control testing, evidence evaluation, findings, recommendations, reporting, and remediation planning

Upcoming Dates

Selected date

London · 26 – 30 Jul 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
AmsterdamScheduled
9 – 13 Nov 2026€5,400—
BakuScheduled
16 – 20 Nov 2026€4,800—
BarcelonaScheduled
23 – 27 Nov 2026€5,400€4,860until 2 Nov
ParisScheduled
23 – 27 Nov 2026€5,700€5,130until 2 Nov
CairoScheduled
30 Nov – 4 Dec 2026€3,300€2,970until 9 Nov
CasablancaScheduled
7 – 11 Dec 2026€4,300€3,870until 16 Nov
DammamScheduled
7 – 11 Dec 2026€4,200€3,780until 16 Nov
RiyadhScheduled
7 – 11 Dec 2026€4,200€3,780until 16 Nov
DohaScheduled
14 – 18 Dec 2026€4,400€3,960until 23 Nov
DubaiScheduled
20 – 24 Dec 2026€4,400€3,960until 30 Nov
GenevaScheduled
28 Dec 2026 – 1 Jan 2027€6,300€5,670until 7 Dec
SalalahScheduled
28 Dec 2026 – 1 Jan 2027€5,300€4,770until 7 Dec
IstanbulScheduled
4 – 8 Jan 2027€4,700€4,230until 14 Dec
Kuala LumpurScheduled
11 – 15 Jan 2027€4,400€3,960until 21 Dec
LisbonScheduled
18 – 22 Jan 2027€5,400€4,860until 28 Dec
LondonScheduled
18 – 22 Jan 2027€5,600€5,040until 28 Dec
AbujaScheduled
18 – 22 Jan 2027€5,100€4,590until 28 Dec
MadinahScheduled
25 – 29 Jan 2027€4,200€3,780until 4 Jan
MadridScheduled
1 – 5 Feb 2027€5,400€4,860until 11 Jan
MakkahScheduled
8 – 12 Feb 2027€4,200€3,780until 18 Jan
AccraScheduled
8 – 12 Feb 2027€5,100€4,590until 18 Jan
ManamaScheduled
15 – 19 Feb 2027€4,700€4,230until 25 Jan
MarbellaScheduled
22 – 26 Feb 2027€5,400€4,860until 1 Feb
BangkokScheduled
22 – 26 Feb 2027€6,100€5,490until 1 Feb
MilanScheduled
1 – 5 Mar 2027€6,000€5,400until 8 Feb
MunichScheduled
8 – 12 Mar 2027€5,400€4,860until 15 Feb
MuscatScheduled
8 – 12 Mar 2027€5,300€4,770until 15 Feb
OnlineScheduled
14 – 18 Mar 2027€1,700€1,530until 22 Feb
BeirutScheduled
14 – 18 Mar 2027€4,000€3,600until 22 Feb
ParisScheduled
22 – 26 Mar 2027€5,700€5,130until 1 Mar
LondonScheduled
26 – 30 Jul 2027€5,600€5,040until 5 Jul

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.